Low
CVE-2025-62366
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2025-59288
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
Medium
CVE-2025-62378
CommandKit has incorrect command name exposure in context object for message command aliases
Medium
CVE-2025-11183
QGIS QWC2 Cross-Site Scripting vulnerability
Critical
CVE-2025-61927
Happy DOM: VM Context Escape can lead to Remote Code Execution
Medium
CVE-2025-61925
Astro's `X-Forwarded-Host` is reflected without validation
High
ghsa-j44m-5v8f-gc9c
Flowise is vulnerable to arbitrary file exposure through its ReadFileTool
High
CVE-2025-61928
Better Auth: Unauthenticated API key creation through api-key plugin
High
CVE-2025-71380
n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host
Critical
CVE-2025-61913
Flowise is vulnerable to arbitrary file write through its WriteFileTool
High
CVE-2025-61687
FlowiseAI/Flosise has File Upload vulnerability
Medium
CVE-2025-13033
Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
High
CVE-2025-11362
pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding
Critical
CVE-2025-59159
SillyTavern Web Interface Vulnerable DNS Rebinding
Critical
CVE-2025-55346
Flowise vulnerable to RCE via Dynamic function constructor injection
Medium
CVE-2025-11287
MCPHub has an Improper Authorization vulnerability via its handleSseConnection function
Low
CVE-2025-11285
MCPHub's ServerController is vulnerable to Command Injection
Medium
CVE-2025-29192
Flowise Stored XSS vulnerability through logs in chatbot
Critical
CVE-2025-50538
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Medium
CVE-2025-71331
Flowise vulnerable to XSS
Low
CVE-2025-59829
Claude Code permission deny bypass through symlink
High
CVE-2025-59536
Claude Code can execute commands prior to the startup trust dialog
Low
CVE-2025-56514
Fiora chat user avatar is vulnerable to XSS via SVG files
Low
CVE-2025-56515
Fiora chat group avatar is vulnerable to XSS via SVG files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.